Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/540ce152-8bb1-3901-932c-3d40a1898d9f.roa
File:                     540ce152-8bb1-3901-932c-3d40a1898d9f.roa (raw, json)
Hash identifier:          Yxva3aNgVKwRUABVusXJZurASbeIW0aHTPIUb42EXWo=
Subject key identifier:   D2:BE:A9:10:CF:19:06:78:DC:78:20:0A:E9:E2:4C:C2:6A:D3:5E:1D
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584E1E4465DF860A8852F0348500
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/540ce152-8bb1-3901-932c-3d40a1898d9f.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     33363
IP address blocks:        2605:a401:8174::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:65:df:86:0a:88:52:f0:34:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=84a7154d-c7aa-4665-9e42-1389543a0ee5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:74:a0:93:ca:3e:db:57:a6:dc:c9:db:b2:fd:
                    b6:87:19:28:f3:ed:9c:f9:f7:88:d2:04:71:ee:fc:
                    3b:5b:f5:75:bd:83:d7:09:a2:c8:be:bf:03:83:53:
                    16:4f:88:37:a5:fd:09:02:92:81:08:64:25:5b:59:
                    fb:ea:f4:f3:06:86:9c:ce:64:76:46:6e:52:32:fc:
                    63:ca:d4:69:14:65:2f:0a:16:5a:0d:22:74:11:95:
                    03:09:61:78:74:c8:ff:2a:35:2d:93:d6:b2:4a:e7:
                    29:7c:1d:63:20:6f:8a:2a:4b:a8:d2:78:6d:3c:f3:
                    be:15:6e:31:5b:06:8e:0c:13:3b:b8:b0:2e:8b:53:
                    e9:0d:e2:5c:9e:34:0d:34:b3:82:c0:53:50:92:36:
                    20:cf:66:a8:e7:50:10:0b:99:17:24:71:a3:55:f8:
                    ad:2f:9f:f9:04:c9:79:38:f2:73:4d:be:e1:58:5c:
                    61:cd:02:17:86:94:97:4d:29:85:e9:87:61:cc:40:
                    19:a1:e3:aa:6c:40:20:48:53:e9:a9:96:b6:20:5c:
                    76:86:ff:88:5f:d9:c1:50:3e:23:a2:dd:da:f4:f6:
                    3b:5a:8d:f8:8f:2a:10:06:b6:65:3a:ef:66:c7:10:
                    2f:43:ed:9f:a9:5f:a1:87:80:af:fb:75:42:de:1a:
                    1a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:BE:A9:10:CF:19:06:78:DC:78:20:0A:E9:E2:4C:C2:6A:D3:5E:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/540ce152-8bb1-3901-932c-3d40a1898d9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8174::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:b4:85:a5:3a:d7:12:16:6f:9b:ee:2c:b8:3b:dd:30:ec:f2:
         69:2e:9b:13:54:4b:3c:5b:ff:5b:6a:78:1e:7b:38:a4:08:96:
         11:4d:c3:b9:80:17:a8:98:07:34:5f:7e:a3:6e:fb:bb:71:d5:
         71:9b:0a:f0:d2:90:ed:19:05:bf:65:02:ba:86:3c:5e:c5:4d:
         4d:2c:56:99:9f:d6:b0:81:bc:12:41:d0:b5:64:fa:6e:42:bc:
         a3:b9:da:ae:cf:01:78:57:59:8b:69:f3:d8:ff:09:07:48:ca:
         6f:60:d1:e3:e1:b3:09:14:9c:59:1f:74:d4:d0:53:26:55:0d:
         2b:c1:a5:83:bb:b1:f1:7a:85:33:a7:cc:6f:4d:55:46:b2:49:
         78:91:00:64:f9:20:24:2c:a5:70:bd:6b:d4:f1:98:ff:e1:20:
         95:3d:cb:6c:2e:11:1e:22:7b:73:bd:d8:a2:97:76:d0:a3:e2:
         82:7c:24:28:e6:02:b3:e0:ff:b8:cf:1d:b7:5b:73:fa:5d:32:
         b2:38:fe:a5:21:90:cc:c9:81:a9:21:8d:e4:2e:19:21:2d:b2:
         b0:52:6d:c4:d2:7d:ea:a5:04:e2:0f:71:f0:27:3c:4d:0f:d0:
         03:b2:d3:12:17:5a:08:46:73:cb:62:6a:50:f6:d2:d8:59:5f:
         cb:f5:a1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:02:25 2026 by rpki-client